High · 8.5 CVE-2026-32478 EUVD-2026-64802GHSA-w84f-pwww-634r

WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by Patchstack

Vendor: weDevs Pte Product: WP Project Manager Pro

Description

Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

Affected products

Vendor	Product	Affected	Fixed
weDevs Pte	WP Project Manager Pro	≤ 4.0.1	—

References

https://patchstack.com/database/wordpress/plugin/wedevs-project-manager-business/vulnerability/wordpress-wp-project-manager-pro-plugin-4-0-1-sql-injection-vulnerability?_s_id=cve vdb-entry